What is a characteristic of the security onion analogy to visualizing defense-in-depth?
- The outer skin of the onion represents hardened internet-facing systems.
- The core or heart of the onion represents the firewall surround by protective layers.
- All layers of the onion must be penetrated to gain access to vulnerable assets.
- Each layer of the onion may reveal sensitive data that is not well secured.
| Explanation & Hint:
The analogy of an onion to represent the concept of defense-in-depth means that a threat actor would have to peel network defenses layer by layer in a manner similar to peeling an onion. Only after penetrating each layer would vulnerable assets be exposed. The outer layer of the onion is representative of the firewall as the first line of defense. |